Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/b92cc3-ddf1-43cb-b4b1-4154da5ceb9b/1/uQ9AvbnmZHaekXWQ942253GT11E.mft
File: uQ9AvbnmZHaekXWQ942253GT11E.mft (raw, json)
Hash identifier: IxWX2icvFNsFr9M+zNtwqHLU6lJUQoRpsHAy2JQFs+Q=
Subject key identifier: 3E:24:C7:2A:CC:54:19:EF:F4:20:46:92:09:97:03:85:FD:DF:E7:93
Authority key identifier: B9:0F:40:BD:B9:E6:64:76:9E:91:75:90:F7:8D:B6:E7:71:93:D7:51
Certificate issuer: /CN=b90f40bdb9e664769e917590f78db6e77193d751
Certificate serial: 019D28849D2BA3719878959D9F0862EDCB19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uQ9AvbnmZHaekXWQ942253GT11E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/b92cc3-ddf1-43cb-b4b1-4154da5ceb9b/1/uQ9AvbnmZHaekXWQ942253GT11E.mft
Manifest number: 0B44
Signing time: Thu 26 Mar 2026 05:01:12 +0000
Manifest this update: Thu 26 Mar 2026 05:01:12 +0000
Manifest next update: Fri 27 Mar 2026 05:01:12 +0000
Files and hashes: 1: uQ9AvbnmZHaekXWQ942253GT11E.crl (hash: MB3ew2nYwnLhxhP8gQqbcPqWwaGxWNxJ21DQ1yAFZZQ=)
2: xTTTaBdVu0SeLwv0Gx01IddtE50.roa (hash: ivpMuo01dDNrw/GCqkgH0f4L7FOwQRX4fhYsRXB+ZA8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/b92cc3-ddf1-43cb-b4b1-4154da5ceb9b/1/uQ9AvbnmZHaekXWQ942253GT11E.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/b92cc3-ddf1-43cb-b4b1-4154da5ceb9b/1/uQ9AvbnmZHaekXWQ942253GT11E.mft
rsync://rpki.ripe.net/repository/DEFAULT/uQ9AvbnmZHaekXWQ942253GT11E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:9d:2b:a3:71:98:78:95:9d:9f:08:62:ed:cb:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b90f40bdb9e664769e917590f78db6e77193d751
Validity
Not Before: Mar 26 05:01:12 2026 GMT
Not After : Mar 27 05:01:12 2026 GMT
Subject: CN=3e24c72acc5419eff420469209970385fddfe793
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e6:0e:30:0d:d7:e8:c9:e6:a0:e0:96:30:0a:
ba:25:bd:9f:c5:72:78:a9:bc:b2:c0:46:a5:02:f8:
3e:26:81:fd:60:c0:a8:c9:38:7d:ab:a7:73:b5:77:
92:bf:37:75:c3:80:2e:81:e2:a5:7d:b9:86:63:37:
d0:6f:0d:92:45:e4:14:54:35:f5:9e:82:5e:c7:12:
66:3c:c5:12:8a:d9:be:91:c7:f8:70:7c:6c:62:85:
f3:8c:c1:95:c6:11:3c:7d:05:82:63:e9:36:16:87:
70:d2:41:67:6c:45:e2:4a:43:b4:14:a9:48:be:2f:
b5:41:ea:1c:9b:7d:17:4c:ae:70:7c:30:f7:28:d5:
f2:9d:7a:2c:e6:ba:c3:7d:68:9a:44:c1:3c:8c:a2:
f0:7e:28:ab:f5:0d:39:4a:95:bf:71:a9:2d:55:bd:
0f:b2:71:00:b2:7e:73:bc:39:1c:31:c5:c9:52:f0:
cd:7f:5d:7e:3b:11:e8:a9:a0:60:ad:67:ad:d5:d7:
73:67:f3:8c:97:42:7b:b0:7f:ea:bd:ea:75:52:29:
ae:8f:21:28:41:29:e5:b6:0a:a1:25:db:b3:1f:95:
ad:d9:66:f4:50:fe:68:67:ca:53:3e:3d:42:7c:0a:
c8:e9:28:30:34:dc:02:38:01:a2:c7:a2:cb:9b:db:
dc:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:24:C7:2A:CC:54:19:EF:F4:20:46:92:09:97:03:85:FD:DF:E7:93
X509v3 Authority Key Identifier:
keyid:B9:0F:40:BD:B9:E6:64:76:9E:91:75:90:F7:8D:B6:E7:71:93:D7:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uQ9AvbnmZHaekXWQ942253GT11E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/b92cc3-ddf1-43cb-b4b1-4154da5ceb9b/1/uQ9AvbnmZHaekXWQ942253GT11E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/b92cc3-ddf1-43cb-b4b1-4154da5ceb9b/1/uQ9AvbnmZHaekXWQ942253GT11E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:d6:e3:76:21:26:96:f3:8d:19:a6:23:39:f9:3b:af:bc:09:
8d:e3:f1:39:b7:27:f4:cf:1e:77:68:1f:18:43:9a:74:2d:3d:
29:c5:56:ef:d1:2a:78:f5:4f:0f:38:2b:c2:d8:03:da:8b:07:
80:3a:5d:67:c1:78:8e:e4:cb:19:3b:49:0d:a9:ad:69:ae:70:
b9:6d:32:08:78:0a:9a:09:53:ea:4e:26:dc:97:f7:12:45:00:
87:ae:b6:f9:29:21:97:d2:be:e3:9d:ed:80:82:69:58:73:d4:
51:18:f8:b2:93:a0:3d:2d:7a:9f:5c:d9:08:bd:33:56:82:4b:
b8:21:e5:75:b4:83:2c:ab:94:e6:86:1c:c6:18:c1:ce:4e:15:
0b:6b:92:48:71:87:fe:c5:9d:4c:a0:e5:52:65:c4:9c:88:ff:
8b:d1:35:a6:9b:c7:0f:87:5a:80:ee:b8:c6:7e:a6:f5:6c:a0:
c3:5b:8c:49:8e:0b:87:84:ba:c1:46:45:32:c8:90:7f:33:77:
5f:88:57:9d:0f:47:63:7f:ee:7f:c0:72:99:10:cc:61:39:27:
e0:25:fe:c2:fe:49:fe:6d:9b:17:94:ff:c8:cd:25:6a:9a:7f:
07:de:8c:f1:81:f7:e2:4d:b3:21:93:e6:41:ed:86:36:66:b0:
ec:ca:97:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:33:51 2026 by rpki-client